CVE-2005-0824

Name of the Vulnerable Software and Affected Versions Mathopd versions 1.5p0 through 1.5p4 Mathopd versions 1.6x before 1.6b6 BETA

Description The issue allows local users to overwrite arbitrary files via a symlink attack on dump files triggered by a SIGWINCH signal when Mathopd is running with the -n option. This is due to a problem in the internal dump function.

Recommendations For Mathopd versions 1.5p0 through 1.5p4, update to version 1.5p5 or later. For Mathopd versions 1.6x before 1.6b6 BETA, update to version 1.6b6 BETA or later.